The (outsourced) cyber security guys who updated her set up suggested it was malware. However, it was year's ago and I wasn't that close to the actual cyber stuff, just talked her through whether she needed to report the breath to the ICO (she did) as customer data was breached. If I can't get my wife to keep security apps on her phone do you think I can get her to update her apps when needed?